soturail 0.2.1 → 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,26 @@
1
+ # Workflow Rail
2
+
3
+ Workflow Rail is planned for v0.4.0. It is not implemented in v0.2.2.
4
+
5
+ The goal is to describe repeatable engineering workflows as local, auditable artifacts that can later export into Skill Rail or an MCP server.
6
+
7
+ Planned commands:
8
+
9
+ ```bash
10
+ soturail workflow new <name>
11
+ soturail workflow from-template <name>
12
+ soturail workflow validate
13
+ soturail workflow export skill
14
+ ```
15
+
16
+ ## Security Requirements
17
+
18
+ - Keep generated workflows local-first by default.
19
+ - Validate workflow files before execution or export.
20
+ - Scan for prompt injection.
21
+ - Scan for destructive shell commands.
22
+ - Scan for secret exfiltration.
23
+ - Scan for downloaded script execution such as `curl ... | sh` and `wget ... | bash`.
24
+ - Require human approval before enabling generated workflows or exported skills.
25
+
26
+ Workflow Rail should complement, not replace, the existing SotuRail rails: `soturail run`, raw log recovery, Knowledge-to-Rules, benchmarks, cache-normalized payloads and self-dogfooding reports.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "soturail",
3
- "version": "0.2.1",
3
+ "version": "0.2.2",
4
4
  "description": "Local-first context rails for AI coding agents: reversible terminal compression, progressive repo reading, SDD workflows, hooks, benchmarks, memory and cache-friendly payloads.",
5
5
  "type": "module",
6
6
  "bin": {
@@ -17,6 +17,7 @@
17
17
  ],
18
18
  "scripts": {
19
19
  "build": "tsc -p tsconfig.json",
20
+ "prepack": "npm run build",
20
21
  "test": "vitest run",
21
22
  "typecheck": "tsc -p tsconfig.json --noEmit",
22
23
  "build:native": "cargo build --manifest-path native/soturail-native/Cargo.toml --release",
@@ -27,7 +28,11 @@
27
28
  "bench": "node dist/cli.js bench run --engine ts",
28
29
  "bench:report": "node dist/cli.js bench report",
29
30
  "bench:native": "node dist/cli.js bench run --engine native",
30
- "bench:compare": "node dist/cli.js bench compare-engines"
31
+ "bench:compare": "node dist/cli.js bench compare-engines",
32
+ "release:check": "node scripts/release.mjs check",
33
+ "release:prepare": "node scripts/release.mjs prepare",
34
+ "release:publish": "node scripts/release.mjs publish",
35
+ "release:full": "node scripts/release.mjs full"
31
36
  },
32
37
  "keywords": [
33
38
  "ai-agents",